Customer users don't have access to the phases which are in draft state.
But if we create posts inside such phases or edit phase timelines and so on, customer users still get notification about new posts with links which lead to the phase which they cannot see.
Also, the customer can see notifications regarding the phase timeline and so on.

I guess customers shouldn't get notifications about the phases they don't have access to.